Skip to content
Log inGet started

Your business. Your clients. Their data.

Great reception starts with explaining how information is handled.

  • An access password per business
  • The AI identifies itself as AI
  • Rights of access, rectification and erasure

How your data is protected

Privacy and GDPR

Built to comply: controlled access, the AI introduces itself as AI and your customers can exercise their rights.

What's built in

Dashboard access with your business's password and lockout after failed attempts. On the phone, the receptionist introduces itself as an artificial intelligence assistant, as the European AI Act requires.

Your customers can ask to see, correct or delete their data by writing to the privacy address.

Your part

You remain the controller of your customers' data and we process it on your behalf. We recommend not asking for health data or other specially protected data in the conversation.

  • An access password per business
  • The AI identifies itself as AI
  • Rights of access, rectification and erasure

More detail

Purposes, retention periods and providers, in the privacy policy.

Encryption and data access

Everything travels over HTTPS and the most sensitive data is stored encrypted with AES-256-GCM.

In transit

The website, the dashboard and the connections to the AI and telephony providers run over HTTPS, with HSTS so the browser never uses an unencrypted connection.

At rest

ID numbers, email addresses and internal notes on contact records are encrypted with AES-256-GCM before being stored, with a key that lives on the server and not in the database.

Conversations are stored so you can see them in your dashboard. They aren't end-to-end encrypted, because the receptionist has to read them to reply.

  • HTTPS and HSTS everywhere
  • AES-256-GCM on sensitive data
  • Encryption key kept outside the database

What it means for your business

Even if someone walked off with a copy of the database, your customers' ID numbers, email addresses and notes couldn't be read without the server key.

Where your data is

Which providers are involved and with what safeguards, no small print.

Who's involved

The application and the database are hosted on Railway. AI and voice providers are involved in replying and answering calls, some of them with servers in the United States.

With what safeguards

When a provider processes data outside the European Economic Area, it does so with GDPR safeguards: the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

  • Providers with a data processing agreement
  • Transfers with GDPR safeguards
  • Full list in the privacy policy

If you need more

If your sector requires everything to stay within the EU, write to us before you start and we'll tell you exactly which provider processes which data.

Your data is yours

We don't sell it. You see it in your dashboard and you can ask for it to be deleted.

What it's used for

Conversations are used for one thing only: looking after your customers and showing it to you in your dashboard. We don't sell your data or your customers' data to anyone.

You're in control

From the dashboard you see the full history and you can delete a contact's record along with their service history.

If you want us to delete everything about your business when you cancel, or one of your customers asks for their data, write to us at the privacy address and we'll do it.

  • Full history in your dashboard
  • Delete records from the dashboard
  • Full deletion on request

When you cancel

Cancelling your subscription doesn't delete your data straight away, so you can come back without losing anything. If you want it deleted, just ask and it's deleted.

Documented protections

  • HTTPS and HSTS everywhere
  • AES-256-GCM on sensitive data
  • Encryption key kept outside the database
Full list in the privacy policy

Frequently asked questions

Your rights over your data

We don't sell it. You see it in your dashboard and you can ask for it to be deleted.

Exercise your rights